Information Technology Reference
In-Depth Information
In Figure 4,
| AC | is the distance from point P to the "abnormal plane".
| BD | is the distance from point Q to the "abnormal plane ";
| UV | is the threshold.
| AC | <| UV |, and | BD | <| UV |;
P and Q are abnormal.
Let fp (x) is the abnormal probability function of x ,
then fp (P) = | UV | - | AC | and fp (Q) = | UV | - | BD | represent the abnor-
mal probability of P and Q. And then,
| AC | <| BD |,
fp (P) > fp (Q) .
That is to say the abnormal probability of point P is higher than that of Q.
z
P
o
x
E
A
y
Q
F
B
Fig. 5. The simple distance model of behavior vector to normal plane
While in figure 5,
| AE | is the distance from point P to the "normal plane";
| BF | is the distance from point Q to "normal plane";
In the same way, fp (P) = | AE |, fp (Q) = | BF |. And then,
Search WWH ::




Custom Search